Executive Summary

Summary
TitleNew mailman packages fix denial of service
Informations
NameDSA-955First vendor Publication2006-01-25
VendorDebianLast vendor Modification2006-01-25
Severity (Vendor) N/ARevision1

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:N/I:N/A:C)
Cvss Base Score7.8Attack RangeNetwork
Cvss Impact Score6.9Attack ComplexityLow
Cvss Expoit Score10AuthentificationNone Required
Calculate full CVSS 2.0 Vectors scores

Detail

Two denial of service bugs were found in the mailman list server. In one, attachment filenames containing UTF8 strings were not properly parsed, which could cause the server to crash. In another, a message containing a bad date string could cause a server crash.

The old stable distribution (woody) is not vulnerable to this issue.

For the stable distribution (sarge) this problem has been fixed in version 2.1.5-8sarge1.

For the unstable distribution (sid) this problem has been fixed in version 2.1.5-10.

We recommend that you upgrade your mailman package immediately.

Original Source

Url : http://www.debian.org/security/2006/dsa-955

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10038
 
Oval ID: oval:org.mitre.oval:def:10038
Title: Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).
Description: Scrubber.py in Mailman 2.1.5-8 does not properly handle UTF8 character encodings in filenames of e-mail attachments, which allows remote attackers to cause a denial of service (application crash).
Family: unix Class: vulnerability
Reference(s): CVE-2005-3573
 Version: 5
Platform(s): Red Hat Enterprise Linux 3
CentOS Linux 3
Red Hat Enterprise Linux 4
CentOS Linux 4
Oracle Linux 4
 Product(s):
Definition Synopsis:
Definition Id: oval:org.mitre.oval:def:10660
 
Oval ID: oval:org.mitre.oval:def:10660
Title: Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573.
Description: Mailman 2.1.4 through 2.1.6 allows remote attackers to cause a denial of service via a message that causes the server to "fail with an Overflow on bad date data in a processed message," a different vulnerability than CVE-2005-3573.
Family: unix Class: vulnerability
Reference(s): CVE-2005-4153
 Version: 5
Platform(s): Red Hat Enterprise Linux 3
CentOS Linux 3
Red Hat Enterprise Linux 4
CentOS Linux 4
Oracle Linux 4
 Product(s):
Definition Synopsis:

CPE : Common Platform Enumeration

TypeDescriptionCount
Application25

Open Source Vulnerability Database (OSVDB)

idDescription
21723Mailman Message Processing Date Field Overflow
20819Mailman Scrubber.py utf8 Filename Processing DoS